Unified Communications Manager
Coverage of Unified Communications Manager in the Nexus archive.
- Cisco finally confirms attackers exploiting Unified CM flaw
Cisco has confirmed that attackers are exploiting a vulnerability in its Unified Communications Manager (Unified CM) system. The flaw was patched in early June but is now being actively used by attackers.
- Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Cisco has patched a server-side request forgery vulnerability (CVE-2026-20230) in Unified Communications Manager, allowing unauthenticated attackers to write files and escalate to root. Proof-of-concept exploit code is now public, though Cisco's PSIRT reports no observed attacks yet.
- Cisco warns of critical Unified CM flaw with PoC exploit code
Cisco has released security updates to address a critical-severity flaw in its Unified Communications Manager (Unified CM) that allows attackers to gain root privileges. The vulnerability includes the availability of Proof of Concept (PoC) exploit code.